TITLE OF THE INVENTION: 
Network Server and Method of Discovery of a Network Node 

CROSS-REFERENCE TO RELATED APPLICATIONS: 
Not Applicable 

STATEMENT REGARDING FEDERALLY FUNDED RESEARCH OR 
DEVELOPMENT: 
Not Applicable 

INCORPORATION BY REFERENCE OF MATERIAL SUBMITTED ON 
COMPACT DISC: 
Not Applicable 

BACKGROUND OF THE INVENTION: 

Technical Field 

[001] This invention relates to computer systems and more particularly to computer 
networks that interconnect network nodes, such as computers and computer peripherals. Even 
more particularly, the invention relates to discovery of network nodes. 

Background Art 

[002] Network Management Systems like the OpenView Network Node Manager product 
are designed to discover network topology (i.e., a list of all network node in a domain, their type, 
and their connections), monitor the health of each network node, and report problems to the 
network administrator. OpenView Network Node Manager (NNM) is a product distributed by 
Hewlett-Packard Company of Palo Alto, Calif. 

The monitoring function of such a system is usually performed by a specialized computer 
program which periodically polls each network element and gathers data which is indicative of 
the network element's health. A monitor program typically runs on a single host. However, in 
distributed networks, monitors may run on various nodes in the network, with each monitor 
reporting its results to a centralized display. 

[003] Network discovery is performed periodically using Internet control message protocol 
(ICMP) polling (pings and mask requests), simple network management protocol (SNMP) polling 
and / or other diagnostic requests. In addition or as an alternative to these protocols Desktop 
Management Interface (DMI) or Windows Management Instrumentation (WMI) which is also 
referred to as WBEM can be used. 
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[0041 For example by means of SNMP polling a configuration check operation is 
performed on each node. By default this configuration check operation is performed once each 
day whereby this period is configurable. This way it is determined at periodic intervals if any 
relevant configuration information has changed since the last check. More technical detail of the 
internals of the NNM product is disclosed on 

(http://support.openview.hp.com/pdf/dev_ov_netmon96.pdf), the entirety of which is herein 
incorporated by reference. 

[005] Elements of the code for discovering the topology of a plurality of network elements 
and the code for periodically polling a plurality of network interfaces associated with the plurality 
of network elements are also disclosed in U.S. Pat. No. 5,185,860 of Wu entitled "Automatic 
Discovery of Network Elements, and in U.S. Pat. No. 5,276,789 of Besaw et al. entitled "Graphic 
Display of Network Topology". Both of these patents are hereby incorporated by reference for all 
that they disclose. 

[006] A disadvantage of scheduled discovery which is performed by the NNM product is 
that the discovery procedure can negatively affect network performance when the discovery 
procedure is carried out. This is why the discovery schedule is typically set such that the 
discovery procedure is carried out when the network load is low, i.e. during the night. However, 
performing the discovery at predetermined time intervals has the disadvantage that network nodes 
which are connected to the network only temporarily can be missed by the discovery. In particular 
this applies to portable computers, such as lap top computers which are frequently connected and 
disconnected to the network by means of a docking station. 

Summary of the Invention 

[007] The present invention provides a new and improved method of and apparatus for 

discovering a network node. Initially an access request is received from a network node. In 
response to the access request a discovery request is generated and transmitted to a discovery 
server. The discovery server performs a discovery procedure for the network node from which the 
access request has been received. 

[008] In comparison to a scheduled discovery the method and apparatus set forth in the 

immediately preceding paragraph has the advantage that network nodes, which are only 
temporarily connected to the network, are always discovered while making minimal usage of 
network bandwidth resources for the discovery procedure as not the whole network but only the 
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network node identified by the access request is discovered. Another advantage is that no extra 
software needs to be installed on fire network nodes as the discovery procedure can be .nutated by 

,009] A farther advantage is that the unplanned discovery of network nodes can be 

performed eentrafiy by one discovery server maintaining the discovery rules and collecting , he 
discovery results or a few interconnected discovery servers. This greatly simplifies the network 
administration task. 

.00101 In accordance with a preferred embodiment of the invention a discovery 

procedure is only performed foragiven network node after a minimum amount oftime has .apsed 
since the last discovery procedure had been performed. This way unnecessary drscovery 
procedures are avoided when a network node is frequently disconnected and reconnected to the 
computer network. For example, the configuration ofalaptop computer usually does no. change 
veryoften.Howevcr.alap top computer system can be removed and reconnected to fire computer 

network within short time intervals, especially if a docking station .s used. 

10011] In accordance with a further preferred embodiment of the invention the discovery 
procedure is initiated by a log on request received by a network server, such as a domam 
controller, from a network node. Typically the user of the network node needs to enter his or her 
nser ID and password for authentication. After the log on procedure has been completed 
successfully a discovery request is generated and sent to a discovery server from the network 



,00121 In accordance with a further preferred embodiment of the invention the network 

node request which initiates the discovery procedure is an IP address request. For example, when 
a computer peripheral, such as a printer, is connected to the computer network, the computer 
peripheral sends an IP address request which is processed by a DHCP server. The DHCP server 
assigns an IP address to the requesting network node. After the IP address has been assigned to 
the network node a discovery request is generated and transmitted to the discovery server together 
with the IP address. 
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Brief Description of the Drawings 

[0 013] In the following preferred embodiments of the invention will be described, by 

way of example, and with reference to the drawings in which: 

Figure 1 is illustrative of a block diagram of a computer network having a network server 
being coupled to a discovery server, 

Figure 2 is illustrative of a flow char, for performing a method of discovery of a network 
node, 

Figure 3 is a block diagrem of a computer network having a temporarily connected 
portable computer, 

Figure 4 is illustrative of a block diagram of a computer network having a DHCP server, 
Figure 5 is illustrative of a flow char, of an alternative method of discovery of the 
network node. 



Detailed Description of the Drawing 

,0014] Figure 1 includes a network server 100 of a computer network having a plurality of 
network nodes. For ease of explanation omynetwork notie 102 of the computer network is show, 
in Figure 1. Network node 102 is not permanently coupled to the computer network bu, , 
dtsconnectcd and reconnected from time to time. Network node 102 has an assigned TP address 
for addressing of network node 102 by means of me transmission control protocol / Interne, 
protocol (TCP /IP). 

,0015] Ne,work server 100 has program componen, 104 for processing of access request 106 
received from network node 102. For example program component 104 serves for authen.ica.ton 
purposes of network node 102 and/or ofauser of network node 102. 

,0016] Further network server 100 has program componen, 108 which serves for initiation of a 
discovery procedure. After suecessfcl completion of the processing of access request 106 by 
program componen. ,04, progmm componen, 108 generates discovery request 110 and sends 
discovery request 110 together with the IP address of network node 102 to discovery server 
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[0017, Discovery server 1,2 has memory ,14 for storing of ft. IP address received with 
discovery reaues, 110. For examp.e memory .14 is a FIFO buffer for storing a stack of IP 
addresses. 

(00181 Discovery server ,12 has discover program .16 for performing a discovery procedure 
for network node , 02. The discovery procedure is performed by ,CMP and / or SNMP polls 18 
in order to determine the network topology, i.e. other nodes to which network node 102 ts 
connected, to discover configuration information of network node ,02 and / or other status 
information of network node 102. 

,00191 In operation, when network node ,02 is physically connected to the network, it sends 
access re,uest,06 to network server lOOinorderto obtain accessto the network resources. When 
access request 106 is received by network server 100 this invokes program component 104. 
Progmnt component 104 processes access request 106. For example, program component 104 
performs an authentication procedure prior to gaming access to the network resources. After 
successful completion of the processing of access request 106 by program component 104 access 
is grauted ,„ network node 102 and program component ,08 is invoked by program componeu, 
104. 

(00201 Progmm component ,08 generates discovery request 1 ,0 which comprises the IP 

address of network node 102. It is to be noted that in the embodiment considered here fixed IP 
addresses are being used, i.e. me IP address of network node ,02 is assipred once aud then fixed. 

(00211 Pro-am compouem 108 seuds discovery request 110 with the IP address to discovery 
server 112. Discovery server 112 stores the IP address received with discovery request 110 m 
memory 1 14. Further discovery program 1 .6 is invoked for performing a discovery procedure for 
network node 102 which is identified by its IP address. This is performed by ICMP and / or 
SNMP polls. 

(00221 Discovery server ,12 can receive a sequence of discovery requests 110 containing 
various IP addresses of various network nodes which have requested access to the computer 
network. This sequence of IP addresses is stored as a stack in memory ,14. The stack of IP 
addresses is processed by discovery program 1 16 in firs.-in-first-out order. 
[0023] I. is to be noted that network server 100 and discovery server 1 12 are implemented on 
different server computers; alternatively network server 100 and discovery server 1.2 » 
implemented on the same server computer which is partitioned correspondingly. In part.cular the 
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discovery server 1 12 can be implemented by any server computer running the relevant program, 
such as the network server computer 100. 

[0024] Figure 2 is a corresponding flowchart. In step 200 an access request is received from a 
removable network node which has been physically reconnected to the network. The access 
request from the network node is directed towards logical re-coupling of the network node to the 
computer network, i.e. the granting of access to network resources. 

[0025] In step 202 the access request is processed. For example prior to granting of access the 
authenticity of the network node and / or of its user and / or of its access rights are checked. After 
successful authentication and / or successful check of the access rights the network node - 
granted access to the network and is logically reconnected. 

[0026] In response to the logical ^connection of the network node a discovery request is 
generated and sent to the discovery serve, The discovery request contains an identifier of the 
network node, such as its node ID. Preferably the IP address of the network node is used as a node 
ID. 

[0027] Alternatively the name or other addressing information of the node can be used as an 
identifier. In response to the discovery request the discovery server performs a discovery 
procedure for the network node identified by the node ID in the discovery request m step 206. 
[0028] The trigger for performing the discovery procedure is the discovery request and not a 
prescheduled point of time. This means that a discovery procedure is only initiated if the network 
node is actually coupled to the network. 

[0029] Figure 3 is an alternative embodiment based on the embodiment of Figure 1. Like 
elements of the embodiments of Figures 1 and 3 are designated by like reference numerals havxng 
added 200 to the reference numerals in the embodiment of Figure 3. 

[0030] In the embodiment shown in Figure 3 network node 302 comprises portable computer 
320 which is physically coupled to the computer network through docking station 322. For 
example portable computer 320 is a lap top computer, palm top computer or other mobile 
computing device. 

[0031] in operation portable eompnter 320 is reconnected to the compnter network by inserting 
portable computer 320 into docking station 322 and booting portable computer 320. Next a log on 
dialogue is started between network server 300 and portable computer 320. 



[0032] If a Microsoft windows operating system is used network server 300 plays the role of a 
domain controller for portable computer 320. Log on request 306 is processed by progmm 
component 304 of network server 300. When the user of portable computer 320 has correct y 
entered a valid user ID and password portable computer 320 is logged on and is thus logtcally 
reconnected to the network. 

(00331 As a consequence program component 304 invokes program component 308 for 
initiation of the discovery procedure for portable computer 320. The IP address of portable 
computer 320 which is known to network server 300 is transmitted as par. of discovery request 
310 to discovery server 312 winch performs a discovery procedure analogous to the discovery 
procedure as explained above with respect to Figures 1 and 2. 

.00341 Figure 4 is a block diagram of a further preferred embodiment where like elements are 
referenced by like reference numerals as in Figure 1 having added 300 to Ore reference numerals. 
[00351 In the embodiment shown in Figure 4 network server 400 is a DHCP server. DHCP 
provides automated configuration services including automated assignment of fP addresses. 
Network server 400 has a corresponding DHCP services program component 404. 
[00361 In the preferred embodiment considered here, network node 402 is a computer peripheral 
device, such as a printer. Computer peripheral 402 has a media access control (MAC) address 
which is stored in permanent storage 420 of computer peripheral 402. 

[0037] Network server 400 has time stamp program component 422. Time stamp program 
component 422 serves to provide a time stamp for discovery request 410 which is generated by 
program component 408 for discovery initiation. 

[0038] In operation when computer peripheral 402 is physically coupled to the computer 
network an IP address request 406 is automatically generated by computer peripheral 402 based 
on the MAC address stored in storage 420 in accordance with the DHCP protocol. In response to 
IP address request 406 network server 400 invokes DHCP services program component 404 for 
processing of IP address request 406. 

[0039] DHCP services program component 404 assigns an IP address to computer peripheral 
402 Next program component 408 is invoked which generates discovery request 410 winch 
includes the newly assigned IP address of computer peripheral 402. Discovery request 410 » tune 
stamped by time stamp program component 422 and then sent from network server 400 to 
discovery server 412. 
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[0040] Discovery server 412 has a discovery log file 424 in which the IP addresses and time 
stamps of previously received discovery requests for which discovery procedures have been 
performed are stored. For example discovery log 424 has a tabular structure, e.g. for each request 
a request number, time stamp and IP address are stored in the discovery log 424. Discovery server 
412 queries discovery log 424 using the IP address of discovery request 410 as a key. If an entry 
in discovery log 424 with that IP address is identified the corresponding time stamp stored in the 
discovery log 424 and the time stamp of discovery request 410 are compared: 
[00411 If time stamp of discovery request 410 is a predetermined amount of time later then the 
time stamp stored in discovery log 424 the IP address of discovery request 410 is entered into 
memory 414 in order to initiate a corresponding discovery procedure by discovery program 416. 
If the contrary is the case discovery request 410 is refused. This way unnecessary discovery 
procedures are avoided when computer peripheral 402 is frequently removed and reconnected to 
the computer network. For example the predetermined amount of time can be set to 6, 12 or 24 
hours. 

[0042] As an alternative to time stamping discovery request 410 by time stamp program 
component 422, the reception time of discovery request 410 can be used as a time reference. In 
this instance time stamp program component 422 is not required. This minimizes the complexity 
of the DHCP Server 400. 

[0043] Again, it is to be noted that network server 400 and discovery server 412 are 
implemented on different server computers; however, network server 400 and discovery server 
412 can also be implemented on the same server computer which is partitioned correspondingly. 
[0044] Figure 5 is a corresponding flow chart. In step 500 an access request is received by a 
network server from a network node which has been physically reconnected to the network. In 
step 502 the access request is processed by the network server. After successful completion of the 
processing in step 502, i.e. when the network node is logically reconnected to the network, a 
discovery request is generated in step 504 and is time stamped with a time stamp i. 
[0045] In step 506 the time stamped discovery request is sent to the discovery server. In 
response the discovery server performs a discovery procedure and enters the node ID of the 
network node for which the discovery procedure has been performed together with time stamp i in 
a discovery log file. 

[0046] In step 508 the network node is removed from the network. In step 5 10 the network node 
is reconnected to the network. As consequence a renewed access request from the reconnected 
network node is received by the network server in step 512 which is processed in step 514 and 



time stamped with time stamp j in step 5 16 before the time stamp discovery request is sent to the 
discovery server in step 517. 

[0047] When the renewed discovery request is received by the discovery server the discovery 
server checks if time stamp j minus time stamp i is above a predefined threshold. In other words 
the discovery server checks if a sufficient amount of time has lapsed between the first discovery 
request for which a discovery procedure has been performed in step 507 and the subsequent 
discovery request with time stamp j. This check is performed in step 518. 

[0048] If the amount of time which has lapsed between the two subsequent discovery requests is 
below the threshold the control goes to step 5 19 where the renewed discovery request is rejected. 
If the contrary is the case a renewed discovery procedure is carried out in step 520. 
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